What's Changed

• Fix timing-safe comparison for social account token validation using hash_equals() (#1179)
• Reject empty/partial tokens explicitly in SocialAccountBehavior::validateAccount() (#1179)
• Fix UsersFixture missing tableAlias causing incorrect Table class resolution for additional_data json type (#1179)
• Fix schema.php discrepancies against migrations: users.active default, users.secret length, users.secret_verified default, social_accounts.avatar type, social_accounts.link type and nullability (#1179)

What's Changed

• Fix type-hint finders with Cake\ORM\Query\SelectQuery for Cake 5 compatibility (#1180)
• Fix redundant null-coalescing on always-set array offsets in SocialBehavior (PHPStan) (#1181)
• Fix ReCaptcha\Response mock incompatibility with PHP 8.4+ readonly classes (#1181)
• Fix correct config keys and hardcoded threshold in OneTimeLoginLinkBehavior (#1178)
• Fix clear activation token after email activation (#1177)
• Use cryptographically secure random bytes in RandomStringTrait (#1176)
• Fix authenticator check before issuing password rehash warning (#1174)

New Contributors

• @jeanvier made their first contribution in #1180

What's Changed

• Feature/gb 1170 by @arodu in #1171
• adjust migrations to use new BaseMigration class by @LordSimal in #1172
• fix deprecations by @LordSimal in #1173

Full Changelog: 16.0.1...16.0.2

What's Changed

• Only set column type for "additional_data" if column exists by @Staubiii in #1168

New Contributors

• @Staubiii made their first contribution in #1168

Full Changelog: 15.1.3...15.1.4

What's Changed

• feat: add event for skipping two-factor authentication verification by @arodu in #1169

Full Changelog: 16.0.0...16.0.1

What's Changed

• fix deprecations for CakePHP 5.3
• Improve docs

Full Changelog: 15.1.3...16.0.0

What's Changed

• Add autofocus by @mehov in #1117
• Feature/deprecations by @steinkel in #1147
• fix more deprecations by @steinkel in #1149
• Feature/fix exception rehash by @arodu in #1157

New Contributors

• @mehov made their first contribution in #1117

Full Changelog: 15.1.2...15.1.3

What's Changed

• phpcs fix by @arodu in #1146

Full Changelog: 15.1.1...15.1.2

What's Changed

• Feature/reset password config by @skie in #1141

Full Changelog: 15.0.2...15.1.0

What's Changed

• Feature/reset password config by @skie in #1141

Full Changelog: 15.0.2...13.1.0